Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: LWX8pTk56vsMDxvGQoUXsbGZbCnRr2Z+BhJQ3TCuOC0=
Subject key identifier: BC:3B:1D:CB:F3:E0:CD:05:C3:90:22:65:F6:33:1E:10:22:14:D2:BB
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 01A183E35ED7B636F61B0CFC3FCADBCBBBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 0568
Signing time: Wed 28 Oct 2026 19:01:18 +0000
Manifest this update: Wed 28 Oct 2026 19:01:18 +0000
Manifest next update: Thu 29 Oct 2026 19:01:18 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: /5iO/PWxklPRzIjtNrWfrWQQ1mYYU2f5mLlzKWmCo68=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:5e:d7:b6:36:f6:1b:0c:fc:3f:ca:db:cb:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Oct 28 19:01:18 2026 GMT
Not After : Oct 29 19:01:18 2026 GMT
Subject: CN=bc3b1dcbf3e0cd05c3902265f6331e102214d2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:70:64:6d:8d:09:34:d5:03:c6:57:65:59:
a7:26:35:bd:38:83:4d:a3:4f:fe:2a:dc:34:d7:6a:
bf:d3:e7:eb:6f:b9:36:f9:a9:60:bb:8f:98:48:7a:
1b:cc:96:e3:17:f7:06:ba:27:d5:c0:e7:95:ea:e7:
09:42:db:22:1e:0c:26:0c:25:2d:c3:89:61:46:6d:
a9:d2:9a:1e:32:0b:5e:0e:a5:41:f2:fc:de:c6:fb:
2b:e7:19:36:59:29:80:d7:3d:d0:94:ae:f1:9d:72:
a6:6b:ab:61:53:50:79:81:4a:c2:d2:5d:6f:3c:4a:
7d:30:d2:38:3e:49:9e:25:33:f5:13:2e:e9:79:5a:
2e:e0:e4:0b:ff:21:8f:78:88:82:ca:ee:63:13:01:
96:7b:69:aa:49:14:34:43:ce:3c:d8:7b:43:d3:3c:
d6:0c:a9:6b:1e:3c:8f:2e:63:55:e2:a7:fd:2a:d8:
26:16:34:89:e6:af:2a:5a:e6:2d:69:d9:42:57:7e:
1d:37:5d:13:a0:cc:f8:ea:6d:59:3f:e1:39:da:33:
94:32:00:32:42:9f:93:1d:ee:28:b8:d3:7b:46:19:
e4:08:fa:e5:60:54:1c:49:fd:67:99:db:ec:24:ab:
08:79:7d:8d:15:1f:77:56:e9:ae:13:62:70:fa:03:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:1D:CB:F3:E0:CD:05:C3:90:22:65:F6:33:1E:10:22:14:D2:BB
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8d:35:cc:ef:45:1b:78:3a:a4:da:9c:d1:76:96:ca:c4:f8:
62:3e:f1:9b:47:2c:d6:33:cb:31:59:77:8f:3f:7d:5a:b0:95:
15:f0:1e:d3:16:b9:7e:b1:a6:44:d4:ed:97:4e:d5:fc:15:29:
03:b9:8a:a9:b4:27:4c:69:f0:de:b9:9b:12:a8:d5:08:f5:6c:
08:cb:0d:96:7a:54:6b:9f:2a:4c:c5:10:97:5a:c6:0a:b8:4e:
94:1c:45:79:69:19:87:dc:60:9d:b5:e1:10:e1:80:7d:ba:e0:
fe:a6:13:a7:84:82:f9:cb:73:b4:a6:68:1e:fe:31:ea:96:97:
4e:b2:be:07:52:81:6c:49:63:bd:1a:0f:c5:bf:bc:83:c8:41:
d3:aa:96:ea:da:0d:43:7b:d1:aa:5a:68:23:a2:3b:90:89:7f:
94:e0:b7:9c:e3:ef:63:34:37:93:6b:f5:66:10:81:c4:13:16:
86:f9:44:23:88:7c:b3:dd:5f:27:22:a8:0c:9c:02:e2:86:60:
51:13:ae:88:82:f6:e6:31:c7:67:6c:9c:6d:29:1c:cc:47:db:
55:02:43:d4:36:20:db:10:45:44:a3:31:ce:1a:fc:88:18:df:
e1:16:5b:f2:91:51:97:c0:f3:37:78:b3:ed:f7:e0:7e:04:c6:
de:01:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:29:50 2026 by rpki-client